EUVD-2022-7048

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Input strings are now escaped to prevent execution of entered Javascript in domain objects.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2022-42466	19 Oct 202212:15	–	circl
CNNVD	Apache Isis 跨站脚本漏洞	19 Oct 202200:00	–	cnnvd
CNVD	Apache Isis Cross-Site Scripting Vulnerability	21 Oct 202200:00	–	cnvd
CVE	CVE-2022-42466	19 Oct 202200:00	–	cve
Cvelist	CVE-2022-42466 XSS vulnerability, eg for String properties.	19 Oct 202200:00	–	cvelist
Github Security Blog	Apache Isis Cross-site Scripting vulnerability	19 Oct 202212:00	–	github
NVD	CVE-2022-42466	19 Oct 202208:15	–	nvd
OSV	GHSA-7PFC-CC9X-8P4M Apache Isis Cross-site Scripting vulnerability	19 Oct 202212:00	–	osv
Prion	Code injection	19 Oct 202208:15	–	prion
Positive Technologies	PT-2022-26448 · Softwarex · Softwarex	19 Oct 202200:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "4a184303-d2a5-3cbb-96cb-a3737904b98f",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "92f64fc1-ddfb-33d1-bf20-86852a0e1b77",
        "product": {
          "name": "Apache Isis"
        },
        "product_version": "unspecified <2.0.0-M9"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-42466
github	www.github.com/apache/isis/commit/30f94df14ea47cea3d10d468a1230fb96a749743
github	www.github.com/apache/isis/commit/33de85d7e40a01f120d8de2adf04d47687362bdd
github	www.github.com/apache/isis/commit/342255124635013194f63c41a7639f979b3340e8
github	www.github.com/apache/isis/commit/a44d53f24a60bcbcbf3919d1b251d5d1e96ba3c2
github	www.github.com/apache/isis/commit/c6e9b392de073d1050b56d8209b7c3079d58c600
github	www.github.com/apache/isis/commit/cc94a9965a82ba8faac1b151777c44061b178673
github	www.github.com/apache/isis
issues	www.issues.apache.org/jira/browse/ISIS-3240
lists	www.lists.apache.org/thread/83ftj5jgtv3mbm28w3trjyvd591jztrz

03 Oct 2025 20:07Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.16.1

EPSS0.2198

SSVC